PT-2018-11239
CVE-2018-12532
·
تاريخ النشر
2018-06-18
·
تاريخ التحديث
2022-05-13
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
JBoss RichFaces versions 4.5.3 through 4.5.17
Description
The issue allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapper and execute arbitrary Java code via a MediaOutputResource's resource request.
Recommendations
For JBoss RichFaces versions 4.5.3 through 4.5.17, update to a version outside of the affected range to mitigate the risk of arbitrary Java code execution.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾